Issue link: https://iconnect007.uberflip.com/i/1472190
30 SMT007 MAGAZINE I JULY 2022 costs, prevent the the of this confidential information. Why do CUI and CTI need protection? e answer is simple. Defense companies spend substantial amounts of money and countless hours developing the next generation of tech- nology and equipment to protect our country. U.S. citizens/persons take comfort knowing that their way of life is protected by our mil- itary and government institutions. If critical information (CUI or CTI) is stolen and sold to another organization or country, our secu- rity comes into question. e ability of the U.S. military and our government to protect us becomes a concern. at is why protecting CUI and CTI becomes so important. The Birth of IPC-1791 and QML ere is concern within the Department of Defense (DoD) that the trustworthiness of printed board and assembly designers and manufacturers for national defense systems is not consistently sufficient. As a result, require- ments for defense systems, including all prod- ucts on the U.S. Munitions List (USML) using electronics are vulnerable to tampering with malicious intent, supply chain disruptions, counterfeit parts and materials, physical secu- rity, cybersecurity, and substandard qual- ity and product assurance. Although require- ments are available to protect defense elec- tronics, they are not consistently applied by the program managers and DoD contractors. About six years ago, IPC and the Executive Agent for Printed Circuit Boards and Inter- connect Technology worked together to form an IPC Committee (2-19b Trusted Supplier Task Group) that was tasked with developing a trusted supplier standard. e team, com- prised of industry and government representa- tion, defined the four pillars of trust as: quality, supply chain risk management, security, and chain of custody. e standard was developed to assure that the requirements were practi- cal, clear, and measurable. In August 2018, the IPC-1791 Trusted Electronic Designer, Man- ufacturer and Assembler Requirements stan- dard was released. Today the standard is at revision B with the committee actively work- ing on revision C. In fall 2019, the Executive Agent and IPC Validation Services developed the IPC-1791 QML (Qualified Manufacturers List) program. IPC Validation Services contin- ues to qualify company locations and displays the trusted suppliers on the QML 1 . What is the IPC-1791 standard and why is it so important? e scope of the standard focuses on providing the minimum require- ments of policies and procedures for printed board design, fabrication, assembly, and cable and wire harness assembly organizations and/ or companies, to become trusted sources for markets requiring high levels of confidence in the integrity of delivered products and ser- vices. Today the standard targets the mili- tary, defense, and aerospace sectors. Future IPC committees plan to target the commercial industries (examples: automotive, medical, telecommunications, industrial, etc.). e benefit of using this standard assures customers that their suppliers: • Maintain a quality system (AS9100) • Maintain a supply chain risk manage- ment (SCRM) system addressing threats, counterfeit disruption, obsolescence of material, and vetting suppliers on their approved vendor list • Provide security requirements (including protecting your CUI/CTI from unauthor- ized access, demonstrating compliance to NIST SP 800-171, ITAR and EAR regulations) The ability of the U.S. military and our government to protect us becomes a concern.